CVE-2024-51482

CVE-2024-51482 ZoneMinder v1.37. = 1.37.64 CVE-2024-51482 poc.py Por defecto, este script enumera la base de datos zm, extrae de la tabla Users y vuelca las columnas Username+Password. Si existen estas 4 cosas, recibirás un nombre de usuario y un hash de contraseña. Se puede encontrar información...

CVE-2024-51482-ZoneMinder-v1.37.-1.37.64-SQL-Injection-POC

Inyección SQL Basada en Tiempo en ZoneMinder CVE-2024-51482 📌 Resumen de la Vulnerabilidad ID de CVE: CVE-2024-51482 Aviso: GHSA-qm8h-3xvf-m7j3 Versiones afectadas: ZoneMinder 1.37. hasta incluyendo 1.37.64 Versión parcheada: 1.37.65 📖 Descripción Este repositorio contiene un exploit de prueba de...

CVE-2024-51482

CVE-2024-51482 — Inyección SQL Ciega Basada en Tiempo en ZoneMinder Un exploit de prueba de concepto para CVE-2024-51482 , una vulnerabilidad de inyección SQL ciega basada en tiempo autenticada en ZoneMinder v1.37. ≤ 1.37.64. El script extrae nombres de usuario y hashes de contraseñas de la tabla...

EUVD-2005-2882

Malware in sbrugna...

EUVD-2006-1890

Malware in sbrugna...

CVE-2025-8908: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.5.4. Affected by this issue is some unknown functionality of the file crm/WeiXinApp/yunzhijia/event.php. The manipulation of the argument openid leads to sql injection. The attack may be launched...

PT-2025-32987 · Unknown · Lingdang Crm

Name of the Vulnerable Software and Affected Versions: Lingdang CRM versions through 8.6.5.4 Description: A SQL injection issue exists in the crm/WeiXinApp/yunzhijia/event.php file. Manipulation of the openid argument can lead to SQL injection, and the attack can be launched remotely. The exploit...

CVE-2024-51482: Improper Neutralization of Special Elements used in an SQL Command

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder v1.37. = 1.37.64 is vulnerable to boolean-based SQL Injection in function of web/ajax/event.php. This is fixed in 1.37.65...

Sql injection

Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/editevent.php...

Sourcecodester Alumni Management System SQL Injection Vulnerability

Sourcecodester Alumni Management System is a Php, Mysql-based alumni management system from Sourcecodester, Inc. SourceCodester Alumni Management System version 1.0 is vulnerable to SQL injection, which allows remote attacker can exploit this vulnerability to execute arbitrary SQL statements via...

Sourcecodester Alumni Management System SQL注入漏洞

Sourcecodester Alumni Management System is a Php, Mysql-based alumni management system from Sourcecodester, Inc. SourceCodester Alumni Management System version 1.0 is vulnerable to SQL injection, which allows remote attacker can exploit this vulnerability to execute arbitrary SQL statements via...

(0Day) Horde Groupware Webmail Edition Event event_alarms Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Horde Groupware Webmail Edition. Authentication is required to exploit this vulnerability. The specific flaw exists within Event.php. When parsing the eventalarms parameter, the process does not...

CVE-2018-19908: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in MISP 2.4.9x before 2.4.99. In app/Model/Event.php the STIX 1 import code, an unescaped filename string is used to construct a shell command. This vulnerability can be abused by a malicious authenticated user to execute arbitrary commands by tweaking the original filenam...

Sql injection

SQL Injection exists in Event Manager 1.0 via the event.php id parameter or the page.php slug parameter...

CVE-2018-6576

SQL Injection exists in Event Manager 1.0 via the event.php id parameter or the page.php slug parameter...

CVE-2018-6576: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in Event Manager 1.0 via the event.php id parameter or the page.php slug parameter...

CVE-2018-5315

The Wachipi WP Events Calendar plugin 1.0 for WordPress has SQL Injection via the eventid parameter to event.php...

Sql injection

The Wachipi WP Events Calendar plugin 1.0 for WordPress has SQL Injection via the eventid parameter to event.php...

CVE-2018-5315: Improper Neutralization of Special Elements used in an SQL Command

The Wachipi WP Events Calendar plugin 1.0 for WordPress has SQL Injection via the eventid parameter to event.php...

totofolder.jp XSS vulnerability

Vulnerable URL: http://www.totofolder.jp/event.php?id=%22%3E%3Csvg/onload=prompt1%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4529066 VIP website status:| No Coordinated Disclosure Timeline: Description|...